
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa
File: 18141426114211EFA0FF3956C4F9AE02.roa (raw, json)
Hash identifier: 6ibxUZSfpjtHgkJWZZsze7H8qqCpHCCsEyFJM3urMps=
Subject key identifier: 3D:D7:8E:5F:E0:04:F6:42:69:53:84:B5:11:7D:7E:0D:8F:DC:70:C9
Certificate issuer: /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial: 0159
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:40:20 +0000
ROA not before: Sat 31 May 2025 06:06:35 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152850
IP address blocks: 103.154.192.0/23 maxlen: 23
103.154.192.0/24 maxlen: 24
103.154.193.0/24 maxlen: 24
2001:df3:cc40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Validity
Not Before: May 31 06:06:35 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59344-5344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:12:6a:7b:51:0a:bb:2e:00:1c:66:f1:31:
c4:18:1a:4a:da:de:46:b2:8f:7a:7e:72:da:ab:0d:
88:5e:99:9c:67:0f:9d:99:ab:46:52:30:7b:a8:b3:
c3:b6:40:19:26:5e:74:52:96:30:e3:1b:a9:95:a7:
97:94:c8:22:59:b1:a7:ea:8d:14:66:94:ed:95:c0:
b2:95:58:91:da:07:8d:c4:7a:39:c2:8b:ee:8e:ce:
f8:7a:80:99:67:ba:e5:4a:a3:81:38:f4:88:5b:f2:
cc:c6:b2:2c:a3:b7:a2:d8:cf:e7:00:cd:d3:85:42:
e7:8a:a0:bc:d7:cc:fd:dd:af:89:4b:d0:4a:66:82:
b6:84:55:9a:7b:50:aa:23:9c:63:33:7b:a1:49:d8:
7e:c2:83:4b:a1:d2:74:20:de:5c:54:64:b4:5a:7e:
46:b5:e3:57:ea:22:2a:b1:68:13:f2:b4:17:97:64:
63:21:b7:af:6d:95:b1:d7:10:50:38:3f:18:1b:04:
6a:6c:ca:b3:6b:11:ed:f6:b6:a7:0c:c6:14:51:e3:
a7:2a:73:7e:0e:c6:a6:e6:0f:32:75:79:51:bd:e5:
14:a6:46:8e:74:55:15:35:ff:3d:35:74:9c:b2:60:
eb:35:7c:70:2f:9c:e1:bc:17:4d:03:94:32:4d:00:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:8E:5F:E0:04:F6:42:69:53:84:B5:11:7D:7E:0D:8F:DC:70:C9
X509v3 Authority Key Identifier:
keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.192.0/23
IPv6:
2001:df3:cc40::/48
Signature Algorithm: sha256WithRSAEncryption
65:53:96:1a:11:44:ce:30:00:b4:d0:3c:68:7c:dd:c3:6d:d9:
3f:6a:c1:e5:11:bc:7f:22:94:a1:2e:86:ff:9d:b2:be:22:9a:
aa:48:8c:6f:ba:e9:58:56:d9:49:b4:5a:87:bd:52:cc:90:a9:
f9:2d:3f:7d:d9:b9:ed:47:ae:6d:32:dd:8f:af:90:7e:19:21:
07:27:ae:84:4e:58:c0:1f:e2:ec:10:50:4a:2c:81:03:cb:19:
07:50:d5:6d:fd:e5:ba:dc:02:3e:c2:7d:7a:33:71:51:08:c7:
cf:e0:6b:fa:eb:2f:59:b5:ae:c1:37:b5:92:94:0e:66:7c:9a:
57:c7:d6:99:19:92:91:24:d5:95:f1:27:97:e3:c0:34:2b:af:
21:04:74:7b:b1:ea:ee:0e:b7:d5:e1:38:d5:6c:47:a0:ef:6a:
99:a9:aa:de:b2:8f:b1:24:2b:c1:4c:48:0b:50:5d:88:4e:ed:
f5:d1:6c:28:e0:74:ec:71:b2:e2:2e:57:9c:64:0d:63:52:96:
e7:19:d1:12:92:9d:bd:d7:9f:d4:6f:5f:0a:43:85:e8:86:b3:
1f:ff:4c:a6:d4:51:91:92:e7:28:20:e5:3f:38:12:3b:70:d6:
a0:c5:a1:ba:6e:b3:7d:52:ed:b7:6e:81:32:65:a3:58:0a:4a:
e1:65:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:57 2026 by rpki-client